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DETAILED ACTION 
EXAMINER'S AMENDMENT 

1. An examiner's amendment to the record appears below. Should the changes and/or 
additions be unacceptable to applicant, an amendment may be filed as provided by 37 CFR 
1.312. To ensure consideration of such an amendment, it MUST be submitted no later than the 
payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview with 
Garth D. Richmond on September 6, 2006. 

The application has been amended as follows: 

In The Claims 

24. (Currently Amended) A method of forwarding data packets using an application-specific 
integrated circuit (ASIC)-based processor, comprising: 
receiving a packet including a header; 

filtering the received packet based on the header to accept or reject the received packet; 
performing traffic analysis on the accepted packet, including randomized sampling based 
on a user-configurable sampling rate of one divided by a user-specified integer; 
generating a random number; 

comparing the user-configurable sampling rate to the generated random number to form a 
resulting value; 

performing the sampling when the resulting value is less than the user-configurable 
sampling rate; 

performing a route lookup for the accepted packet; and 
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forwarding the accepted packet based on the route lookup. 

28. (Canceled). 

29. (Currently Amended) An application-specific integrated circuit (ASIC)-based filter for 
use in router, comprising: 

means for downloading a user-configured filter rule; 
means for applying the filter rule to a packet received by the router; 
means for accepting the packet when the packet is not explicitly rejected by the filter rule 
by setting a bit in a packet notification when the packet matches the filter rule ; 
means for generating a random number; 

means for marking the accepted packet for sampling when the random number is less 
than a predetermined threshold; and 

means for determining whether the packet is to be further processed by the router based 
on a result of the applying the filter rule, the ASIC-based filter being configured to perform 
independently of other processes being performed by the router. 

30. (Currently Amended) The ASIC-based filter of claim 29 [[30]], further comprising: 
means for discarding the packet that arrives on an inbound circuit when the packet 

contains a spoofed network operation center (NOC) source address. 
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Allowable Subject Matter 

2. Claims 1-7, 10-19, 21-26, 29, and 30 are allowed. 

The following is an examiner's statement of reasons for allowance: 

The prior art does not teach or fairly suggest generating a random number and sampling 

the marked packet, with a bit in a packet notification set when the packet matches the filter rule, 

when the random number is less than a predetermined threshold, as specified in independent 

claims 1 and 29. 

The prior art does not teach or fairly suggest a load balancer to accept the received packet 
when the received packet is determined to be out-of-profile and mark the accepted packet as out- 
of-profile, a second drop precedence being assigned to the out-of-profile accepted packet, as 
specified in independent claim 19. 

The prior art does not teach or fairly suggest randomized sampling based on a user- 
configurable sampling rate of one divided by a user-specified integer; generating a random 
number; comparing the user-configurable sampling rate to the generated random number to form 
a resulting value; and performing the sampling when the resulting value is less than the user- 
configurable sampling rate, as specified in independent claim 24. 

Any comments considered necessary by applicant must be submitted no later than the 
payment of the issue fee and, to avoid processing delays, should preferably accompany the issue 
fee. Such submissions should be clearly labeled "Comments on Statement of Reasons for 
Allowance." 
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Conclusion 

3. The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. 

Ferguson et al (US Pub 2005/0018682 Al) discloses systems and methods for processing 
packets. 

McRae (US Patent No. 6,970,462 Bl) discloses method for high-speed packet 
classification. 

Nikander et al (US Patent No. 6,253,321 Bl) discloses method and arrangement for 
implementing IPSEC policy management using filter code. 

4. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Anh-Vu H. Ly whose telephone number is 571-272-3175. The 
examiner can normally be reached on Monday-Friday 7:00am - 4:00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Chi Pham can be reached on 571-272-3179. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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